Companies ignore physical security

Updated on: 23 January,2009 09:19 AM IST |
Kaumudi Gurjar |

Although most of the IT companies spend loads of money on electronic gadgets, biometric devices and updated firewalls, they are unable to prevent data theft.

Although most of the IT companies spend loads of money on electronic gadgets, biometric devices and updated firewalls, they are unable to prevent data theft. And this is due to lack of proper physical security.
u00a0

About three months ago, an employee of IT Company, who was fired, sneaked inside the company premises and stole some of the confidential files that had information about its clients and the salary scales of its employees.
u00a0
But by the time this data theft came to light, it was too late.
u00a0
Narayanan R, CEO of NJY, a company that deals in cyber attacks, said, "When IT companies carry out penetration test, physical security or social engineering are the two important aspect that they tend to ignore."

He added that using fake service pack CDs to send in virus that crashes the system is an old trick, but is still prevails as corporate and IT companies.

Narayanan R, who also helps Pune Cyber Cell to crack cyber crime cases, said, "Companies should focus their attention on physical security, Internet security and information security, communication and wireless security and social engineering." He added, that the last factor on the security check is social engineering.

"It is an important aspect as the person deployed at the administration desk is the weakest link. So malicious hackers often target that weakest link," he disclosed.

"Exciting news! Mid-day is now on WhatsApp Channels